hg | DataProtectionCenter.com – Tech and Security

Attacks Target TimThumb Vulnerability

08

Nov

2011

We were recently alerted to the reports of an attack leveraging a vulnerability in TimThumb – a PHP script for cropping, zooming, and resizing Web images (.JPG,.PNG, .GIF) and used as an add-on script on WordPress. The said vulnerability enables cybercriminals to perform local file insertion. When successfully exploited, it inserts a PHP script, which […]

Category General Written by TrendLabs 0 Comments

Correct Version Aversion

22

Jul

2011

Here’s a site located at buburuzka(dot)com/xhupt/71093(dot)php offering up some fake Flash. Humorously, they don’t seem to have taken much notice of the latest Flash Player version – compare and contrast: Click to Enlarge As you can see, a bit of a difference there. Of course, they’re hoping the victims they attract to a scam like this […]

Category General Written by GFI Labs blog 0 Comments

Update Center targets Chrome and Firefox with fake flash updates

11

Jul

2011

Browser specific scams have mostly been seen in the realm of rogue AV attacks, but here’s one (located at update-center(dot)myftp(dot)org) that checks out your browsing credentials then sends you to one of the below locations for a fake flash update: IE8: Redirected to usa(dot)gov. No fake flash for IE users. It’s a different story for […]

Category General Written by GFI Labs blog 0 Comments

The Latest in IT Security

Posts Tagged ‘hg’

Attacks Target TimThumb Vulnerability

Correct Version Aversion

Update Center targets Chrome and Firefox with fake flash updates

Categories

Featured

Archives

Latest Comments

About Us

Contact Us